$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: vqfkC62STF56aOLm8XiexSGZ/UHbjdZ88pGX4S/ZD1w= Subject key identifier: 61:A3:51:09:1A:4D:91:EF:BC:9A:DF:A9:0E:AF:C0:EC:3C:D9:68:70 Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0B1C Signing time: Tue 04 Nov 2025 19:38:32 +0000 Manifest this update: Tue 04 Nov 2025 19:38:32 +0000 Manifest next update: Tue 11 Nov 2025 19:38:32 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: OWLOpyEW6ePVFIfh/Mb5OKHIrEXCgB2GDQ6lm9HkO7g=) 2: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: ZVAk2XyRV5qdImGf/j24JivHomDtRtZG3rYxPclzl2Y=) 3: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: ABo3IcXyMpH31SOaTDFFqnAvB34b3ThGpsgseByRB6g=) 4: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: 0gogJN1tvbfFuP+Y2TiW3yi7TRYFrhhWC/4sbA0VSAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Nov 4 19:38:32 2025 GMT Not After : Nov 11 19:38:32 2025 GMT Subject: CN=690a5638-62df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:e3:68:7e:dd:4b:57:93:33:6e:e2:30:9f: eb:71:e0:9a:3a:1c:65:74:67:f2:d5:31:8b:04:f8: be:f3:a6:9c:9f:53:1a:07:f9:3a:03:53:13:e7:a1: 3e:40:19:3e:bd:e4:1f:39:65:56:8f:4d:f0:c5:a1: 18:1e:fe:bd:d8:31:17:e1:23:2d:91:68:28:53:5a: de:e4:35:42:7f:5e:4a:40:54:f6:7e:7f:2e:30:e0: 4c:46:2f:40:93:c3:f8:69:b1:21:dd:68:e1:f6:1f: 76:30:d8:79:f4:27:39:c4:06:3f:42:a5:91:43:23: 11:45:32:95:95:24:88:70:ef:a2:d1:1c:e7:0d:3f: 39:db:4c:dc:20:53:00:a3:e6:48:e1:6c:76:e0:26: 05:9b:3a:f6:16:9b:80:41:fa:1e:94:0c:86:16:5c: b1:76:bc:c0:c3:43:9b:a1:18:3b:b5:12:ce:9c:aa: 3e:ec:ce:62:d6:8d:1f:32:f2:41:b8:65:40:e1:50: 9a:68:6a:ff:83:4d:f5:b8:d8:42:1a:a1:ed:d8:c6: aa:07:15:e1:1a:39:fe:b4:8f:29:ab:7f:1f:c7:61: d7:7f:56:56:b4:0e:72:11:9c:9d:b1:0f:f8:f7:dd: ef:41:8c:3b:cd:5e:96:31:09:f7:da:5d:12:a5:c5: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A3:51:09:1A:4D:91:EF:BC:9A:DF:A9:0E:AF:C0:EC:3C:D9:68:70 X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8b:cd:d8:83:bd:49:96:c7:51:ce:7b:11:56:5c:2a:3d:0b: ab:11:a8:70:72:8a:dc:f0:bd:16:f7:f3:48:9e:39:56:ad:1a: 04:05:a9:c9:4f:0b:f3:91:7d:d8:ab:dd:73:d2:bb:c7:63:c1: e8:9c:dd:78:8e:1a:2c:e3:42:9c:d4:47:d5:fd:c0:1c:77:50: 06:d2:d4:dc:02:46:9c:82:85:89:48:25:58:4d:50:d8:2c:7c: 7a:bc:7b:45:a0:77:0a:a9:e8:91:64:76:73:36:86:f9:72:63: 77:53:46:08:f6:11:a4:32:20:c8:f6:ae:9b:56:2c:1e:1e:14: 11:eb:27:f7:36:8d:b0:ab:fb:bf:09:a4:82:1a:03:11:a5:dd: 2a:e8:fa:a3:cc:07:fd:2d:ef:f4:0d:14:10:22:6f:f1:54:43: 34:98:91:e2:ef:20:8d:48:25:4d:07:73:99:0d:ea:f1:55:8f: 3b:2f:28:fe:d4:5e:2f:7a:40:bb:d2:cf:ad:1a:61:8f:b7:c5: 87:ae:e5:43:7a:95:db:4f:88:00:ea:d8:7f:c6:7f:6c:54:c9: c4:c8:97:a2:89:7e:a3:00:d8:00:2a:a0:13:2b:a9:e1:9a:b7: 78:b0:b3:00:dd:e9:02:3d:c6:8e:b9:ea:5d:58:65:60:d1:71: 76:1e:b5:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjUxMTA0MTkzODMyWhcNMjUxMTExMTkzODMyWjAYMRYwFAYD VQQDEw02OTBhNTYzOC02MmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxi7jaH7dS1eTM27iMJ/rceCaOhxldGfy1TGLBPi+86acn1MaB/k6A1MT56E+ QBk+veQfOWVWj03wxaEYHv692DEX4SMtkWgoU1re5DVCf15KQFT2fn8uMOBMRi9A k8P4abEh3Wjh9h92MNh59Cc5xAY/QqWRQyMRRTKVlSSIcO+i0RznDT8520zcIFMA o+ZI4Wx24CYFmzr2FpuAQfoelAyGFlyxdrzAw0OboRg7tRLOnKo+7M5i1o0fMvJB uGVA4VCaaGr/g031uNhCGqHt2MaqBxXhGjn+tI8pq38fx2HXf1ZWtA5yEZydsQ/4 993vQYw7zV6WMQn32l0SpcU7gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGjUQka TZHvvJrfqQ6vwOw82WhwMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNi83Yg71JlsdRznsRVlwqPQurEahwcorc8L0W9/NInjlWrRoEBanJ TwvzkX3Yq91z0rvHY8HonN14jhos40Kc1EfV/cAcd1AG0tTcAkacgoWJSCVYTVDY LHx6vHtFoHcKqeiRZHZzNob5cmN3U0YI9hGkMiDI9q6bViweHhQR6yf3No2wq/u/ CaSCGgMRpd0q6PqjzAf9Le/0DRQQIm/xVEM0mJHi7yCNSCVNB3OZDerxVY87Lyj+ 1F4vekC70s+tGmGPt8WHruVDepXbT4gA6th/xn9sVMnEyJeiiX6jANgAKqATK6nh mrd4sLMA3ekCPcaOuepdWGVg0XF2HrWU -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:17 2025 by rpki-client